medium5.9
CVE-2025-62408
c-ares is an asynchronous resolver library.
Impact
c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using read_answer() and process_answer(), which can cause a Denial of Service. This issue is fixed in version 1.34.6.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| C-Ares | C-Ares | from 1.32.3 before 1.34.6 |